Information disclosure through "access requested" emails

Blocked owners & masters of a group or project would still receive notification emails for access requests, leaking the requesters's name to the blocked user. See the issue for more information.

Upgrade barometer

This version has no migrations and should not require any downtime.

Please be aware that by default the Omnibus packages will stop, run migrations, and start again, no matter how “big” or “small” the upgrade is. This behavior can be changed by adding a /etc/gitlab/skip-auto-migrations file.